The Nigeria Data Protection Commission (NDPC) has launched an investigation into a suspected data breach at the Corporate Affairs Commission (CAC), citing concerns over the security of sensitive government-held data. The probe, confirmed in a statement signed by NDPC Head of Legal, Enforcement and Regulations, Babatunde Bamigboye, is being carried out under Section 46(3) of the Nigeria Data Protection Act, 2023. The NDPC said the investigation will assess access control systems, data privacy impact assessments, vulnerability assessment and penetration testing (VAPT), and compliance by third-party data processors. National Commissioner Dr Vincent Olatunji has directed the agency's technical team to collaborate with relevant authorities and stakeholders to strengthen data protection measures. The Commission noted the increasing sophistication of cyber threats, including large-scale data exfiltration and coordinated attacks on interconnected digital platforms. While the breach remains unconfirmed in detail, the NDPC emphasized that Nigeria's data protection framework is robust and pointed to expanding access to data-driven services as a sign of system resilience. The move is part of broader efforts to maintain public trust, improve data security standards, and support investment in the country's digital economy.
The NDPC's investigation into the CAC breach comes only after a suspected incident, not from proactive detection, raising questions about the responsiveness of oversight. If the breach involved third-party processors, as the probe suggests, then reliance on external vendors in critical government systems may be outpacing regulatory scrutiny. The claim of a robust framework rings hollow if assessments like VAPT were not already mandatory and enforced before a breach occurred. This is less about system failure and more about delayed accountability in Nigeria's data governance.
💡 NaijaBuzz is an AI-assisted news aggregator. This content is curated from third-party sources — NaijaBuzz is not the original publisher and is not responsible for the accuracy of source reporting. The NaijaBuzz Take is AI-assisted editorial opinion only, not established fact. All persons mentioned are presumed innocent until proven guilty by a court of competent jurisdiction. NaijaBuzz does not endorse the views expressed in source articles.
